(LAW ENFORCEMENT SENSITIVE) 


X NO _YES 

5. Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the system/project by name or other personal identifier? 

_NO. [If no, skip to question 7.] 

X YES. [If yes, proceed to the next question.] 

6. Does the system/project collect any information directly from the person who is the 
subject of the information? 

X NO [If no, proceed to question 7.] 

_YES 

a. Does the system/project support criminal, CT, or FCI investigations or 
assessments? 


_NO 

_YES [If yes, proceed to question 7.] 

b. Are subjects of information from whom the information is directly collected 
provided a written Privacy Act (e)(3) statement (either on the collection form or via a 
separate notice)? 

__ NO [The program will need to work with PCLU to develop/implement 
the necessary form(s).] 

_YES Identify any forms, paper or electronic, used to request such 

information from the information subject: 

7. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 
system/project? Full SSNs should only be used as identifiers in limited instances. 

X NO _YES If yes, check all that apply: 

It is not anticipated that users would provide their SSNs | | 

However, should they do so, and the SSN is relevant to the FBI’s| |it 

will be collected. 


_SSNs are necessary to establish/confirm the identity of subjects, victims, 

witnesses or sources in this law enforcement or intelligence activity. 
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_SSNs are necessary to identify FBI personnel in this internal administrative 

system. 

_SSNs are important for other reasons. Describe: 

_The system/project provides special protection to SSNs (e.g., SSNs are 

encrypted, hidden from all users via a look-up table, or only available to certain 
users). Describe: 

_It is not feasible for the system/project to provide special protection to 

SSNs. Explain: 

8. Is the system operated by a contractor? 

X No. 

_Yes. Information systems operated by contractors for the FBI may be 

considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that must be included in the event the system 
collects, maintains or disseminates PE and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel may be required if a contractor is operating the 
system for the FBI. 

9. Has the system undergone Certification & Accreditation (C&A) by the FBI 
Security Division (SecD)? 

X NO If no, indicate reason; if C&A is pending, provide anticipated 
completion date: 

| ~| has not undergone C&A by the FBI SecD as I I b3 

is not connected to any FBI networks. b7E 

_YES If yes, please indicate the following, if known: 

Provide date of last C&A certification/re-certification: 

Confidentiality:_Low_Moderate_High_Undefined 

Integrity: _Low Moderate High Undefined 

Availability: _Low Moderate High Undefined 

_Not applicable - this system is only paper-based. 
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10. Does the system conduct data mining as defined in Section 804 of the 
Implementing Recommendations of the 9/11 Commission Act of 2007, P.L. 110- 
53 (codified at 42 USC 2000ee-3)? 

X NO _YES If yes, please describe the data mining function: 

11. Is this a national security system (as determined by the SecD)? 

_NO X YES 

12. Status of System/ Project: 

X This is a new system/ project in development. 

II. EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? 

2. Has the system/project undergone any significant changes since April 17, 2003? 
_ NO [If no, proceed to next question (11.3).] 


YES If yes, indicate which of the following changes were involved (mark all 
changes that apply, and provide brief explanation for each marked change): 

_ A conversion from paper-based records to an electronic system. 

_ A change from information in a format that is anonymous or non- 

identifiable to a format that is identifiable to particular individuals. 

_ A new use of an IT system/project, including application of a new 

technology, that changes how information in identifiable form is managed. 
(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist.) 

_ A change that results in information in identifiable form being 

merged, centralized, or matched with other databases. 

_ A new method of authenticating the use of and access to 

information in identifiable form by members of the public. 
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_ A systematic incorporation of databases of information in 

identifiable form purchased or obtained from commercial or public sources. 

_ A new interagency use or shared agency function that results in 

new uses or exchanges of information in identifiable form. 

_ A change that results in a new use or disclosure of information in 

identifiable form. 

_ A change that results in new items of information in identifiable 

form being added into the system/project. 

_ Changes do not involve a change in the type of records maintained, 

the individuals on whom records are maintained, or the use or 
dissemination of information from the system/project. 

_ Other [Provide brief explanation]: 

3. Does a PIA for this system/project already exist? 

_NO _YES 


If yes: 


a. Provide date/title of the PIA: 

b. Has the system/project undergone any significant changes since the PIA? 

NO _YES 
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h INFORMATION ABOUT THE SYSTEM / PROJECT 


L Provide a general description of the system or project, that. includes: (a) name of 
the system/project. Including associated aeroavms; (b) structure of the 
system/projeet, Including intereonneeilons with other projects or systems; (c) 
purpose of the system/projeef; Ctl) nature of the Information In the system/project 
and. how It. will he used; (e) who will have access to the information In the 
system/project; (!) and the manner of transmission to all users. (This ki nd of 



2. Does (he sysiem/project collect, .maintain, or disseminate any information about 

l 1 '. . \ ' v . S ' ' 

.NO 

.X.YES (If yes, please continue.. | 
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3, ' vo V. 0 V 0 ! V ' v N v ' ' 0 * ' *> 

' !' t V ' v " O' ' 'l » 0 V ' *' v SC 

linkable to a.n individual. 

(Check it! I that apply.) 

'< O ' v ' S O \ N \ ' \ , , V S , ' 

" V ' Ot ' '■ v V \ ', V » V O V *\ ' 

to indirectly identify specific individuals. 

X , v *» < S V SO , V * N V \ e t *' n 

o v\ ! o s o o o v\\ 0 \ s v -> 

If you marked any of the above, proceed to Question 4. 

'> ' v ' v v •„ •' -,\\ s •.. 

is. - \ 1 „ N V v vv , v< k ' , v' (H S xkHS, 

STOP here after providing the reguested description.! 

4. Docs the system/project pertain only to government employees, contractors, or 
consultants? 

.X NO YES 


O \ v V V V O Ov, 

aliens retrieved from the system/project by name or other personal identifier? 

NO. Iff run skip to question 74 
.X.YES, {If yes, proceed to the next question*! 

Co-' t'OC'VC* 0 , Ov' v Ov' O ' ' O \ O d v ' ' ' < i\ f h 

eon Cv . no "o \n 

NO [If no, proceed to question ?,| 

.X. YES 


< , s V ' NV ' , " v .V 0 V, S O ' O 

.vCnoscs\ res' 

...NO 

.X.YES | If yes, proceed to ques tion 7,) 


epic.org 


14-06-04-FBI-FOIA-20150417-5th-Production 


EPIC-1474 












Vs VlbC''vS N ' s O' s' ' A"s" V s'" s's 's' s\'\ v'l s\\''' 

pts's kk’d 0 WlltUm fo OSs' s \s" ( s s'\ V M 'sis's'K-i! «,s'>'bs' 'W lbs' u'ik 1 ! lo'il fom, 01 VU si 

separat e no d ce) ? 

_NO [The program will .need to work with PCLU to develop/impiemeiit 

the necessary ferm(s},| 

YES Identify any forms, paper or electronic, mmi to request sack 
information from the information subject: 

?. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 

s' n ' s' s'j > i\''\ss s' \ s s <. ' ' \ onus 

X.NO YES If yes, check all that apply: 


S-'N s s s N s ' ' ' f s' s s s ' s s' 

witnesses or sources in this law enforcement or intelligence activity. 


S^Ns.cs i'sW'M'' k'dasi^' Nl ixisnens''m dm'mu rnal cdmm..sO cue 

system. 

V" X \ s s 

_ >s N"% ' s 's '' s ' ss s' X p\' s'- >^\''s' 

cneti.:nc!I KdUco ffom . s l av'?\ ' a s i.vVri' mb s' or-nfo as-nlaHc a' i sm an 
users). Describe: 

it is not feasible for the system/project to provide special protection to 
8n\\ I aplam: 

8. Is the system operated by a contractor? 

.X No. 


.Yes. Information systems operated by contractors for the FBI may be 

s''-, S N ' 'X Ns s N s X < < ,< 

contains standard contract clauses that mast be included, in the event the system 

! s s'' ' \s s s N' ' ' sN' W s ‘ s s"s"N'v\' W 

'un'sxscd as ^ .mois'i w'? x parnn-i1 >> fesm p p ' xy Cmisufomoa* ouh the 

' N s s 0 s \ ' s \ S s' s' ' >N „ M ' 

system .tor the FBI.. 
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9, v \W , S ^W'^VO' ' 0 ^ v, > ' '\ 

Security Division (Sec-D)? 

_X NO If no, indicate reasons if €&A is pending, provide nnikipnfed 

,\ onA'o, o do*' \ "o , 

YES If yes, please Indicate lire following, if known: 

Provide dote of lost C.'&A €erilfieattoo/re"eerfitieation; 

€ on f Idea t! atity : Low M od e rote High U n d oil n ed 


Integrity: 

_ LOW _ 

Moderate_High 

Undefined 

Avail ability: 

. Low w 

Moderate High 

i _Undefined 


Not applicable ~ this system is only paper-based. 
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10, ' V V xX X 0 X V x " > * M 

Implementing Rec<rnimendations of the 0/11 Commission Act of2007, P.L. 110- 

s '\CO <x V , s ' 

.X.NO 


YES If yes, please describe the data mining t»aetio»: 

11, is bos a national security system (as determined by the SeoD)? 

.X.NO .YES 

12. v x' * S' Vs" ' Os 

X rfoo m a m sv swc'n pm em m ,g"o opmun fit's ou dmeked tin's block, 
STOIC The FT A Is now complete sad after division approval^) shook! be 
submitted to FBI OCC/PCLU for final FBI. approval and determination If 
F!A and/or other notions are mpimt| 


i:l existing systems / frojfxts 

1. tt hen n s$\ me s\Sloan ptOKV! Ao eloped ' 

2. Has the system/projeci undergone any significant, changes since April 17, 2003? 

NO [If.no, proceed to next question (11,3). | 


YES >’ v\ x s ^ N nO ail 

khanges that apply, and provide brief explanation for each market! change): 

A conversion from paper-based records to an electronic system. 

x v ' 0 ''O' \ •> s < « ' ' s \ So. 

identifiable to a .format that ,ts identifiable to particular individuals. 

' x x V \ X X ' x A' V s 

technology, that changes horn information in identifiable form is managed. 
' ' ' * ' 'x e ' xo x\".«' m mm umo 

' O X \ x X ' x x ' x'\ \ 

X ' xV 'x x' ! ' X x> 

merged, centralized, or matched svith other databases. 
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A new method of authenticating the use of ami access to 
information in identifiable form by .members of the public. 

A sysi.eotai.lc incorporation of databases of information in 

> S n O v x. x x \iO t ' 1 > -' 

A new interagency use or shared agency function that results in 
new uses or exchanges of information .in identifiable form. 

' v. ' \'w v cv w " v 

identifiable form, 

A change that results in new items of information i.n identifiable 
form being added into the sysient/proioct. 

V V s sOC xxO O' ‘ S < Cxi 

the individuals on tv hunt records are maintained, or the use or 
dissemination of information from the systeni-projeci, 

r" x fifoo uk to U,r esofon fo-m"; 

3. Docs a PI A tor this system/project already exist? 

NO YES 

If yes: 

a. Provide date/tlde of the PI A: 

0 x xx' x X x' ' \ >' ''O', n \\ xCC °I \ 

.NO .YES 


film PTA is now complete and after division approvals) should be submitted to 
FBI CJCC/PCLU for final FBI approval and determination if PIA and/or other 
actions arc required.J 
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